Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912675B/56769A301DA411EBB4163A45C4F9AE02/C4ADE9F6BC6C11F0A0E57E30C4F9AE02.roa
File:                     C4ADE9F6BC6C11F0A0E57E30C4F9AE02.roa (raw, json)
Hash identifier:          QQD+HK4WN4jCMXTqepne7XvoWo6FYRtiqfAUfqJBvOo=
Subject key identifier:   A1:00:49:90:D2:F4:79:46:D4:20:49:89:E0:87:BE:01:74:AA:93:85
Certificate issuer:       /CN=A912675B/serialNumber=E2665EE362E5CC58F7D67F4A6B7621AA460BD38E
Certificate serial:       0809
Authority key identifier: E2:66:5E:E3:62:E5:CC:58:F7:D6:7F:4A:6B:76:21:AA:46:0B:D3:8E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4mZe42LlzFj31n9Ka3YhqkYL044.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912675B/56769A301DA411EBB4163A45C4F9AE02/C4ADE9F6BC6C11F0A0E57E30C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:52:58 +0000
ROA not before:           Sat 08 Nov 2025 06:32:59 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     133605
IP address blocks:        103.138.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912675B/56769A301DA411EBB4163A45C4F9AE02/4mZe42LlzFj31n9Ka3YhqkYL044.crl
                          rsync://rpki.apnic.net/member_repository/A912675B/56769A301DA411EBB4163A45C4F9AE02/4mZe42LlzFj31n9Ka3YhqkYL044.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4mZe42LlzFj31n9Ka3YhqkYL044.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:26:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2057 (0x809)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912675B, serialNumber=E2665EE362E5CC58F7D67F4A6B7621AA460BD38E
        Validity
            Not Before: Nov  8 06:32:59 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a452ca-5006
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:06:46:3d:f0:de:fb:82:3f:dc:fc:cd:5e:d7:
                    ae:4f:67:bd:e2:f4:3f:c3:b3:7d:af:09:58:b9:ae:
                    15:59:1d:09:95:bf:cf:5a:d6:75:b5:13:c5:38:9c:
                    42:e4:81:60:4d:57:d9:df:18:a3:cd:5c:a0:38:40:
                    de:4a:91:7f:31:0e:a1:d4:ee:64:b0:e7:91:ee:a0:
                    b3:e8:06:cf:33:6e:af:82:81:6c:82:15:cb:38:37:
                    c0:71:ea:7b:2d:4e:b1:50:b7:a6:02:a6:4a:cc:f8:
                    d9:f9:9d:35:06:cf:4c:6f:fd:54:0c:60:0e:a5:e3:
                    99:35:7e:4f:81:c8:89:91:21:38:1e:f7:ee:62:c3:
                    a1:f2:49:c0:61:f3:6a:71:7a:78:b0:18:45:d5:8b:
                    0c:c6:d6:84:9d:e1:f0:6b:09:1c:41:06:14:d7:b4:
                    58:7d:46:81:f8:56:bb:49:43:2d:1d:a3:7b:1b:fd:
                    50:bf:8f:3f:f4:0b:10:cb:64:77:da:f2:30:8a:bb:
                    47:bd:25:d9:14:e3:23:1d:1f:8b:d2:f3:94:38:26:
                    77:c7:96:49:70:a4:a1:13:2b:7c:da:ba:73:cf:6f:
                    c9:66:f2:9a:5c:1e:18:64:16:ca:b7:bb:8c:39:f7:
                    6e:37:e8:da:55:24:6a:7d:cc:46:04:7c:cb:a7:52:
                    fc:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:00:49:90:D2:F4:79:46:D4:20:49:89:E0:87:BE:01:74:AA:93:85
            X509v3 Authority Key Identifier:
                keyid:E2:66:5E:E3:62:E5:CC:58:F7:D6:7F:4A:6B:76:21:AA:46:0B:D3:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912675B/56769A301DA411EBB4163A45C4F9AE02/4mZe42LlzFj31n9Ka3YhqkYL044.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4mZe42LlzFj31n9Ka3YhqkYL044.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912675B/56769A301DA411EBB4163A45C4F9AE02/C4ADE9F6BC6C11F0A0E57E30C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.138.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:79:2d:4e:50:e2:1c:b0:01:6f:cf:cd:99:d8:a9:81:c2:e2:
         0a:77:b3:11:70:5d:e0:9b:63:ba:33:9a:c0:99:e0:71:ca:fa:
         ba:ad:bd:9a:32:42:ef:cc:f2:f9:81:ae:9a:a2:59:23:1f:8a:
         27:39:7f:8f:31:20:c0:1c:5b:ea:63:93:b7:ef:12:21:f2:6d:
         13:b9:3b:60:0b:dd:f0:e0:8a:0e:5b:0e:db:ab:56:fa:5e:e8:
         5a:97:fb:bd:a7:38:c3:48:80:ba:1e:44:c5:40:83:cc:9d:b3:
         61:c6:cd:72:38:3b:4e:2d:53:ca:de:3b:e8:f6:cb:25:df:29:
         d8:c0:e0:da:b3:93:fc:ed:09:f8:f4:66:2b:ea:22:3f:22:a3:
         f3:27:ea:fc:f4:44:fd:77:3e:36:a3:fe:3e:93:3a:3b:67:72:
         42:99:63:06:31:21:c7:55:7b:b0:a0:d1:eb:32:11:e5:db:45:
         54:5a:be:7a:65:ab:2c:ce:09:78:50:e7:df:da:45:10:76:0f:
         57:40:5b:8e:c4:d5:bf:27:32:cb:c2:20:a6:7a:4e:6e:ef:9d:
         68:0c:f9:1b:d8:81:68:ea:07:12:77:cd:a4:f4:c2:e8:22:f6:
         46:82:5b:4e:33:ad:5f:bf:3b:4b:f2:40:24:ab:de:fd:87:7e:
         7c:52:54:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:48:18 2026 by rpki-client